1 # OCSP stapling, server
5 exim -z '1: Server sends good staple on request'
8 exim -bd -oX PORT_D -DSERVER=server \
9 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
12 -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \
13 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
26 mail from:<userx@test.ex>
28 rcpt to:<userx@test.ex>
37 exim -z '2: Server does not staple an outdated response'
39 # This test fails on older GnuTLS versions, which do not check the resp on the server
41 exim -bd -oX PORT_D -DSERVER=server \
42 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp
44 client-gnutls -ocsp aux-fixed/exim-ca/expired1.example.com/CA.pem HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
62 exim -z '3: Server does not staple a response for a revoked cert'
64 # This test fails on older GnuTLS versions, which do not check the resp on the server
66 exim -bd -oX PORT_D -DSERVER=server \
67 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp
70 -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \
71 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
89 exim -z '4: Connection functions when server is prepared to staple but client does not request it'
92 exim -bd -oX PORT_D -DSERVER=server \
93 -DOPTION=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp
97 HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2